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Top Stories 

• Fifteen California medical professionals were charged in a $25 million scheme involving a 
firm that hired pharmacists to produce a pain-relief cream and gave kickbacks to doctors 
and chiropractors to prescribe it and submit phony claims from October 2009 to January 
2013. - Associated Press (See item 22 ) 

• The Montana Department of Public Health and Human Services reported June 24 that a 
May data security breach compromised about 1.3 million individuals’ State health records 
when hackers gained access to the department’s computer server. - Reuters (See item 23 ) 

• NRAD Medical Associates in Garden City, New York, informed 97,000 patients that a 
former radiologist accessed and acquired protected health and personal information from 
its billing system without authorization in April. - Long Island Newsday (See item 24 ) 

• Federal prosecutors charged a former Iowa State University laboratory manager after he 
confessed to skewing results of an experimental HIV vaccine after years of work and 
millions in grants were spent. - Associated Press (See item 25 ) 
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Energy Sector 



1. June 23, Associated Press - (Colorado) Crews dismantle tank at site of Colorado oil 
spill. The Colorado Department of Natural Resources and Noble Energy crews worked 
to dismantle a flood-damaged storage tank in order to remove oil-stained soil from a 
site on the Poudre River near Windsor where roughly 7,200 gallons of crude leaked 
into the river June 20. 

Source: http://www.9news.com/story/news/local/2014/06/23/crews-dismantle-tank-at- 
site-of-colorado-oil-spill/ 1 1 297 813/ 

For another story, see item 19 
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Chemical Industry Sector 

2. June 24, U.S. Environmental Protection Agency - (Virginia) Roanoke chemical 

distributor ordered to pay $612,339 for hazardous waste storage violations. Chem- 
Solv, Inc., and Austin Holdings-VA L.L.C. were ordered June 5 to pay $612,339 in 
penalties for violating State and federal hazardous waste storage regulations at its 
Roanoke chemical distribution facility. The companies were also instructed to comply 
with a U.S. Environmental Protection Agency order to cease unpermitted storage of 
hazardous waste and perform waste analyses. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/dffee 

a6df46956de85257d0100653b34 



For another story, see item 15 
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Nuclear Reactors, Materials, and Waste Sector 

3. June 25, Nuclear Street - (Arkansas) NRC issues two yellow findings for fatal crane 
collapse at Arkansas Nuclear One. The U.S. Nuclear Regulatory Commission issued 
two yellow findings June 24 against the Arkansas Nuclear One nuclear power plant for 
a 2013 crane collapse at the plant that killed one man and injured eight others. The 
Occupational Safety and Health Administration also issued fines totaling $175,000 to 
several companies involved in the generator stator replacement accident. 

Source: 

http://nuclearstreet.com/nuclear power industry news/b/nuclear power news/archive/ 

2014/06/25/nrc-issues-two-vellow-findings-for-fatal-crane-collapse-at-arkansas- 

nuclear-one-062501.aspx 

[ Return to top ] 
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Critical Manufacturing Sector 



4. June 24, Chicago Tribune - (National) GM recalling some 2012 Chevy Sonic over 
transmission shaft. General Motors announced a recall June 19 for over 21,000 model 
year 2012 Chevrolet Sonic vehicles equipped with 6-speed transmissions and 1.8L 
engines due to the potential for the transmission shaft to fracture. Fracturing of the 
transmission shaft could cause the vehicle to fail to upshift or to coast until reaching 
lower gears. 

Source: http://www.chicagotribune.com/business/chi-gm-recalling-some-2012-chevv- 
sonic-over- transmission-shaft-20 1 40624,0,5767 591 .story 

5. June 24, U.S. Consumer Product Safety Commission - (National) Trane recalls air 
conditioning systems due to shock hazard. Trane announced a recall of around 
100,600 Trane XB300 and American Standard Silver SI air conditioning systems due to 
the ground screws in some units providing insufficient grounding, posing a shock 
hazard. 

Source: http://www.cpsc.gov/en/Recalls/Recall-Alerts/2014/Trane-Recalls-Air- 
Conditioning-Systems/ 

6. June 23, U.S. Department of Labor - (Missouri) Construction Trailer Specialists 
cited by US Department of Labor’s OSHA for exposing workers to amputation, 
other serious hazards. Construction Trailer Specialists based in Sikeston was cited by 
the Occupational Safety and Health Administration with 21 safety and health 
violations, including 4 repeat violations. Proposed fines totaled $82,390. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26274 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

7. June 25, Dark Reading - (International) PayPal two-factor authentication broken. 
PayPal disabled its two-factor authentication option for mobile users after Duo Security 
researchers confirmed an independent researcher’s findings showing that it was 
possible to bypass the feature. The vulnerability exists in a PayPal API and affects 
mobile users but not PayPal’s Web application. 

Source: http://www.darkreading.com/mobile/pavpal-two-factor-authentication- 
broken/d/d-id/1 278840 

8. June 25, Softpedia - (International) GameOver trojan is still in the game. 
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Researchers with Arbor Networks reported that a Citadel campaign that evaded 
takedown attempts has been retrofitted with the GameOver trojan in order to continue 
its bank fraud operations as well as to distribute the CryptoLocker ransomware. 

Source: http://news.softpedia.com/news/GameOver-Troian-Is-Still-In-the-Game- 
448305.shtml 

9. June 25, Softpedia - (International) Cybercriminals lift over $680,000/500,000 EUR 
in one week. Researchers with Kaspersky reported finding a command and control 
(C&C) server for a man-in-the-browser (MitB) campaign that targeted an undisclosed 
large European bank and stole around $680,000 within 1 week from customers’ 
accounts. The C&C server was identified in January but the cybercriminals running it 
took it offline after 2 days, which prevented further analysis. 

Source: http://news.softpedia.com/news/Cvbercriminals-Lift-Over-680-000-500-00Q- 
EUR-In-One-Week-448325.shtml 

10. June 24, Grand Rapids Press - (Michigan) Man police suspect of statewide credit 
card fraud pulled over in Grand Haven, arrested. Police in Grand Haven arrested an 
Illinois man June 21 on suspicion of running a statewide payment card fraud scheme 
where he would allegedly use cloned credit cards to purchase pre-paid credit cards at 
Wesco gas stations. Local authorities and the U.S. Secret Service are involved in the 
investigation. 

Source: http://www.mlive.com/news/grand- 
rapids/index.ssf/2014/06/man police suspect of statewid.html 
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Transportation Systems Sector 

11. June 25, Chicago Tribune - (Illinois) Eisenhower reopened after flooding closes all 
lanes. All lanes of the Eisenhower Expressway in Chicago were blocked and closed 
near 25th Avenue for more than 6 hours, and more than 85 flights were canceled at 
O’Hare International Airport June 24 due to flooding caused by heavy rains. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-isp-eisenhower-shut- 
near-broadview-due-to-flooding-20 1 40624,0,2387 1 03 .story 

[ Return to top ] 

Food and Agriculture Sector 

12. June 25, KNBC 4 Los Angeles - (California) Whole Foods agrees to pay $800K for 
overcharging customers. Whole Foods Market agreed to pay $800,000 to settle 
allegations that the company was charging consumers more than the advertised price 
for certain foods at stores throughout California. State and county officials revealed in 
their investigation that the company failed to deduct the weight of containers when 
charging for food at self-service food stations and provided less product than the 
amount stated on the label. 

Source: http://www.nbclosangeles.com/news/local/Whole-Foods-to-Pay-Settlement- 
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for-Pricing-Errors-26445999 1 .html 



13. June 24, Food Safety News - (Arkansas) Arkansas health officials link Shigellosis 
outbreak to Walmart HQ cafeteria. The Arkansas Department of Health linked a 
Shigellosis outbreak that sickened dozens of individuals to Salsarita’s, a Mexican food 
bar operated by Eurest, located inside the cafeteria of Walmart’s headquarters in 
Bentonville. Salsarita’s temporarily closed while health officials investigated and the 
cafeteria underwent a deep-clean before it reopened. 

Source: http://www.foodsafetynews.com/2014/06/arkansas-health-officials-trace- 
shigella-outbreak-to-walmart-hq-cafeteria 

14. June 24, CNN - (North Carolina) 28k chickens dead after NC farm catches fire. 
About 28,000 chickens were killed June 24 when a chicken house on Tom Moore 
Farms in Bertie County was destroyed by fire. Authorities are investigating the cause of 
the fire. 

Source: http : //myfox8 .com/20 1 4/06/24/thousands-of-chickens-killed-after-nc-farm- 
catches-fire/ 

15. June 24, KTBS 3 Shreveport - (Texas) Report: 262 people hurt in West fertilizer 
blast. Health officials released a report June 24 stating that 262 individuals suffered 
injuries, including concussions and impaired hearing, vision, and breathing problems, 
following an April 2013 explosion at a fertilizer plant in West, Texas. The figure 
includes 72 residents at a nursing home adjacent to the facility, and is in addition to 15 
people who were killed by the blast. 

Source: http://www.ktbs.com/story/25862526/report-262-people-hurt-in- west- fertilizer- 
blast 

16. June 24, Food Poisoning Bulletin - (Alabama) After Salmonella outbreak, El Patron 
in Russellville, AL reopens. Public health authorities cleared El Patron in Russellville 
to reopen June 23 after a weeklong closure that was prompted by a Salmonella 
outbreak which sickened 14 patrons who ate at the restaurant June 4-5. 

Source: http://foodpoisoningbulletin.com/2014/after-salmonella-outbreak-el-patron-in- 
russellville-al-reopens/ 

17. June 24, U.S. Environmental Protection Agency - (Massachusetts) Lakeville, Mass, 
refrigerated warehouses improve public safety practices under EPA settlement. 
Cold Storage Solutions Inc., and three related companies, entered into an agreement 
with the U.S Environmental Protection Agency June 24 to settle allegations that the 
companies failed to file chemical inventory reports required under federal law at four 
refrigerated storage warehouses in Lakeville. The companies agreed to pay $108,000 in 
penalties and to complete environmental projects exceeding $345,000. 

Source: 

http://yosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/9778 

7a45cdb03c5c85257d0100634364 
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18. June 23, U.S. Department of Labor - (Pennsylvania) US Department of Labor's 



OSHA follow-up inspection finds Birdsboro Kosher Farms Corp. still violating 
safety standards. The Occupational Safety and Health Administration cited Birdsboro 
Kosher Farms Corp., June 23 for 4 repeat, 3 serious, and 1 other-than-serious safety 
violations after conducting a follow-up inspection that began in December 2013 at the 
company’s Birdsboro kosher poultry processing facility. Proposed penalties total 
$59,400. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=2627 1 



[ Return to top ] 

Water and Wastewater Systems Sector 

19. June 25, WCAU 10 Philadelphia - (Pennsylvania) Hundreds of homes without gas 
days after water main break. A 12-inch water main broke June 21 in the Kingsessing 
neighborhood of Philadelphia, causing crews to shut off water and gas service to more 
than 1 ,000 homes after officials determined the ruptured water main also affected a gas 
line. Service was restored to about 300 homes by June 24 after utility crews inspected 
the homes for damage in their fuel lines. 

Source: http://www.nbcphiladelphia.com/news/local/Hundreds-of-Homes-Without- 
Gas-Days-After-Water-Main-Break-2645038 1 1 .html 

20. June 24, Bay City News - (California) Water main break in Outer Mission. 

Residents of the 300 block of Joost Avenue in San Francisco’s Outer Mission 
neighborhood were without water service for between 4 and 6 hours June 24 due to an 
8-inch water main breaking and buckling a sidewalk in the area. 

Source: http://sfappeal.com/2014/06/water-main-break-in-outer-mission/ 

21. June 24, KCRG 9 Cedar Rapids - (Iowa) City of Tama issues partial boil order after 
water main break. Residents in a portion of Tama, Iowa, were put under a boil order 
June 24 through at least June 25 due to a water main break. 

Source: http://www.kcrg.com/subiect/news/citv-of-tama-issues-partial-boil-order- after- 
water-main-break-20 140624 
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Healthcare and Public Health Sector 

22. June 25, Associated Press - (California) 15 medical professionals indicted for $25M 
scheme. Fifteen pharmacists, doctors, and other medical professionals in southern 
California were charged in a $25 million workers’ compensation scheme linked to the 
death of a baby. The scam involved a workers’ compensation claims management firm 
that hired pharmacists to produce a pain-relief cream and gave kickbacks to doctors and 
chiropractors to prescribe it and submit phony claims from October 2009 to January 
2013. 

Source: http://news.msn.com/crime-iustice/15-medical-professionals-indicted-for- 
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dollar25m-scheme 



23. June 25, Reuters - (Montana) Montana health record hackers compromise 1.3 

million people. The Montana Department of Public Health and Human Services 
reported June 24 that a May data security breach compromised about 1.3 million 
individuals’ State health records including Social Security numbers when hackers 
gained access to the department’s computer server. Officials continue to investigate the 
incident and the full extent of damage. 

Source: http://news.msn.com/science-technology/montana-health-record-hackers- 
compromise- 13-million-people 

24. June 24, Long Island Newsday - (New York) Long Island radiology practice NRAD 
informs 97,000 patients of data breach. Garden City-based Nassau Radiologic Group 
Medical Associates (NRAD) informed 97,000 patients that a former employee had 
unauthorized access to their personal information after learning the former radiologist 
accessed and acquired protected health and personal information from NRAD’s billing 
system in April. 

Source: http://www.newsday.com/news/health/long-island-radiology-practice-nrad- 
informs-97 -OOO-patients-of-data-breach- 1.8553832 

25. June 24, Associated Press - (Iowa) Researcher charged in major HIY vaccine fraud 
case. Federal prosecutors charged a former Iowa State University laboratory manager 
after he confessed to skewing results of an experimental HIV vaccine by spiking rabbit 
blood samples with human antibodies to appear more successful. A separate 
experiment determined the results were bogus after years of work and millions in grants 
were spent. 

Source: http://news.msn.com/crime-justice/researcher-charged-in-major-hiv-vaccine- 
fraud-case 



26. June 24, Fort Wayne Journal Gazette - (Indiana) Parkview hit with $800,000 records 
fine. The U.S. Department of Health and Human Services’ Office for Civil Rights 
announced June 23 that Indiana-based Parkview Health System Inc., agreed to pay 
$800,000 to settle potential privacy violations related to a June 2009 records dump 
where 71 cardboard boxes of medical records containing data from nearly 8,000 
patients were left unattended and accessible in the driveway of a doctor. 

Source: http://www.joumalgazette.net/article/20140624/LQCAL/306249984 

For another story, see item 15 



T Return to top i 



Government Facilities Sector 



27. June 23, Canandaigua Daily Messenger - (New York) Police: Employee allegedly 
stole $50K from local colleges. Geneva City Police reported that an employee for 
Hobart and William Smith Colleges in New York was charged for allegedly stealing 
$50,000 over 6 years from the school’s information technology department while 
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working as the purchasing agent from 2008 to 2014. 

Source: http://www.mpnnow.com/article/20140623/NEWS/14062990Q/1994/NEWS 



28. June 23 West Hawaii Today - (Hawaii) Mauna Kea State Park to close for repairs. 
Officials reported that Mauna Kea State Park in Hawaii will close indefinitely July 1 
for renovations. 

Source: http://westhawaiitodav.com/communitv-bulletin/mauna-kea-state-park-close- 
repairs 

29. June 23, WCBS 2 New York City - (New Jersey) Orange High School student 
accused of hacking into computer system, changing grades. Essex County 
prosecutors charged a 16-year-old Orange High School student with hacking into the 
New Jersey school’s computer system to change grades and attendance records using a 
staff member’s password. 

Source: http://newvork.cbslocal.com/2014/Q6/23/orange-high-school-student-accused- 
of-hacking-into-computer-system-changing-grades/ 

T Return to top i 

Emergency Services Sector 

30. June 24, Orangeburg Times and Democrat - (South Carolina) Law enforcement 
complex evacuated after chemical spill. The Orangeburg County Law Enforcement 
Complex in South Carolina was evacuated and closed June 24 due to a chemical spill 
after about one liter of acid spilled in a forensic laboratory when a shelf collapsed. Law 
enforcement services remained in operation while crews cleaned up the spill. 

Source: http://thetandd.com/news/law-enforcement-complex-evacuated-after-chemical- 
spill/article c7995ef8-fbc5-l Ie3-b4el-001a4bcf887a.html 

31. June 24, Pensacola News Journal - (Florida) Gas service restored to Escambia 
County’s Main Jail. Escambia County’s Main Jail facility restored gas service June 23 
after a leaking gas valve in the building’s boiler system caused service to be cut off 
June 22. 

Source: http://www.pni.com/story/news/2014/06/23/gas-leak-main-iail-inmates-safe- 
county-says/1 1273407/ 

32. June 23, Durham Herald-Sun - (North Carolina) Fire forces evacuation of Orange 
County prison. All 216 inmates at the Orange Correctional Center in Hillsborough 
were evacuated and temporarily relocated after a fire damaged the kitchen at the facility 
June 21. The cause of the fire is under investigation and the inmates will return to the 
facility once the kitchen is repaired. 

Source: http://www.thetimesnews.com/news/top-news/fire-forces-evacuation-of- 
orange-county-prison- 1 .336696 
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Information Technology Sector 



33. June 24, IDG News Service - (International) Researchers expect large wave of rootkits 
targeting 64-bit systems. McAfee released a report June 24 that found that the number 
of new rootkit samples in the first quarter of 2014 increased to the highest levels seen 
since 2011, with more rootkits designed for 64-bit operating systems expected in the 
future. 

Source: http://www.networkworld.com/article/2367401/researchers-expect-large-wave- 
of-rootkits-targeting-64bit-systems.html 

34. June 24, Securityweek - (International) AskMen compromised to distribute financial 
malware: Report. Researchers at Websense reported June 23 that the AskMen online 
magazine was compromised and used to redirect visitors to a malicious Web site hosting 
exploits for Java and Adobe Reader. 

Source: http://www.securitvweek.com/askmen-compromised-distribute-financial- 
malware -report 

35. June 24, Washington Post - (International) Microsoft says it’s resolved Outlook outage 
for business users across the country. Microsoft reported that it experienced an outage 
June 24 affecting its Exchange Online service, with users reporting being unable to 
access the email service for several hours. The issue was resolved later that evening. 
Source: http://www.washingtonpost.com/blogs/the-switch/wp/2014/06/24/microsoft- 
outlook-outage-reported-across-much-of-the-country/ 

For additional stories, see items 7, 8, and 9 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

36. June 24, BartlesvilleRadio.com - (Oklahoma) Fiber optic line damage halts 
communications. Residents in the Bartlesville area had their cell phone service 
interrupted June 24 due to a damaged fiber optic line between Bartlesville and 
Collinsville. No timeframe was given for repairs to be completed. 

Source: http://bartlesvilleradio.com/pages/news/73062Q14/fiber-optic-line-damage- 
haults-communications 
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Commercial Facilities Sector 



37. June 25, Akron Beacon Journal - (Ohio) Brunswick tornado reminds not all Ohio 
twisters will come with weather warnings. At least 45 businesses and homes in 
Brunswick, Ohio, were damaged June 23 by a tornado that touched down with winds 
reaching 110 miles per hour. 

Source: http://www.ohio.com/news/local/brunswick-tornado-reminds-not-all-ohio- 
twisters- will-come- with- weather-warnings- 1.498 820 

38. June 25, KCCI 8 Des Moines - (Iowa) 22 displaced by fire at apartment complex. A 
2-alarm fire broke out June 24 at the Chapelridge Apartments in Johnston, displacing 
26 individuals. One unit was deemed a total loss and officials cut off gas, electric, and 
water services to 6 additional units. 

Source: http://www.kcci.com/news/crews-battling-fire-in-iohnston-right- 
now/26644472 

39. June 24, WLWT 5 Cincinnati - (Ohio) Gas leak forces street closures, evacuations in 
O'Bryonville Tuesday. More than 10 businesses in O’Bryonville were evacuated for 
about 2 hours June 24 after a contractor installing new gas lines in the area 
inadvertently struck a 2-inch line while using a backhoe. Crews contained the leak and 
worked for several hours to repair the line. 

Source: http://www.wlwt.com/news/part-of-madison-road-closed-by-gas- 
leak/26636724 

40. June 24, York Daily Record - (Pennsylvania) Gas line being repaired outside York 
Expo Center. The York Expo Center in Pennsylvania was evacuated as a precaution 
June 24 after a contractor working on water lines struck a 3-inch gas line outside the 
venue. Crews worked to repair the line and service was expected to be restored to the 
expo center June 25. 

Source: http://www.ydr.com/local/ci 26020998/gas-leak-reported-at-york-expo-center 
For another story, see item 13 
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Dams Sector 



41. June 25, Associated Press - (Washington) Cracked Columbia River dam to be fixed 
this year. The Grant County Public Utility District reported that crews have started 
drilling holes to anchor the Wanapum Dam in order for repairs to a 65 -foot crack found 
in the dam in February to be made by the end of 2014. 

Source: http://www.komonews.com/news/local/Cracked-Columbia-River-dam-to-be- 
fixed-this-year-26457726 1 .html 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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